CVE-2016-7240
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 66%
from disclosure to weapon7 days
Published on NVDNov 10
1st PoC+7d
exploitation probability
66%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7242, and CVE-2016-7243.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40773cve_referencewww.exploit-db.com/exploits/40773/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.